Why I Ended our Bug Bounty Program

My company offered an experimental bug bounty program for a few months during 2024 as a trial with three goals: A) engage with the infosec community, B) assess the effort and cost required to support a bug bounty program, and C) improve the security of our systems. Twomile is a small company with a small staff, funded 100% by customers. We do not have venture capital money or Big Company money to…